Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer (raw, json)
Hash identifier:          ocyDFX75wMSAUr7mMyMDGRyMsLYS1Lxg980cb5UImBA=
Subject key identifier:   F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028F6D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 15 Feb 2026 13:07:52 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 140054
                          IP: 103.147.230.0/24
                          IP: 103.178.82.0/24
                          IP: 2001:df2:a780::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167789 (0x28f6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 15 13:07:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:a5:27:dd:e1:9e:5d:fa:b4:54:1a:4c:5a:
                    04:37:9b:5e:73:19:aa:e8:a9:a0:53:0d:fb:dc:78:
                    81:9d:92:ad:b3:58:bb:d3:0f:49:e0:ea:58:1c:21:
                    ea:5e:e0:9e:e3:79:89:a9:97:b2:3b:7c:f6:9d:f3:
                    2f:27:6f:dd:01:a2:b0:80:e5:68:48:ae:3a:ba:ba:
                    47:b9:b0:7f:46:2c:b0:ba:ea:42:a4:79:4f:f5:3d:
                    fc:d6:3a:c9:5f:17:fa:50:cb:36:2c:ce:a1:62:4e:
                    48:43:38:30:dd:a7:c2:03:49:6b:c6:d7:7d:07:c9:
                    37:73:b6:83:23:e6:c9:fd:44:e4:2d:52:7c:1f:95:
                    a9:ce:1a:98:c1:33:a5:62:0d:f7:5e:ad:39:0b:c2:
                    ea:d4:01:93:ac:44:b7:8f:be:fe:9c:b8:3a:27:6e:
                    db:9d:9b:3c:95:8e:cf:34:bb:e9:aa:6a:e2:47:7c:
                    03:a3:49:ee:da:d0:bf:80:d7:fa:5c:81:40:9d:a5:
                    bf:98:78:bb:41:67:77:0f:de:e6:5d:a7:83:9f:6d:
                    32:9d:c1:dd:4f:57:ea:c2:4e:53:54:f8:b3:73:9e:
                    2e:29:1c:6f:0b:c2:59:ef:ba:37:88:7f:59:cf:fe:
                    d6:3a:a6:a4:ea:a3:3c:1d:6d:8d:a8:03:1a:d5:62:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140054

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.230.0/24
                  103.178.82.0/24
                IPv6:
                  2001:df2:a780::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:48:ee:46:f5:82:8c:e3:93:e8:83:6a:ef:33:33:de:aa:
         a5:72:f3:aa:3f:25:ff:59:c4:61:02:d5:b3:fe:e0:3e:27:4c:
         a2:80:55:23:d4:3d:22:27:a1:3a:8c:2c:82:d3:e7:a8:b0:99:
         9e:08:ef:73:ad:38:37:14:82:24:fc:43:b1:c2:d4:49:52:a7:
         2d:f3:ca:c1:88:e4:ce:5d:17:bb:1c:a0:a1:33:2c:e4:2b:09:
         01:5c:44:0f:05:b5:0b:8d:c2:b7:5f:03:4e:e2:32:8b:c0:e0:
         01:18:ec:dc:4c:6b:a1:57:58:20:c5:40:21:fa:e0:3f:ed:e5:
         5c:88:a3:05:44:c3:e9:2a:99:25:37:d0:29:ca:f4:d9:4f:53:
         c2:c0:6d:79:9f:f9:e5:4d:15:79:f1:bf:1e:13:88:c8:02:1a:
         79:84:2f:f9:d0:cc:b8:12:dd:fa:64:77:84:c6:cc:79:13:b4:
         1e:c7:3f:a7:6e:b2:85:03:04:22:2f:9d:fb:47:1a:ec:08:63:
         26:84:f5:9e:a2:04:2b:4e:3d:f7:a6:60:80:5b:63:f2:4e:2e:
         48:1d:6b:10:67:1a:c8:6d:b2:c3:16:45:68:69:37:77:79:98:
         02:57:5e:eb:3f:23:8c:ce:6a:25:dd:0a:9e:d8:39:3a:62:35:
         7b:98:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:26:47 2026 by rpki-client